From d69e434fbc91788e8f7cb940a35cac6dc43079cb Mon Sep 17 00:00:00 2001
From: John McLear <john@mclear.co.uk>
Date: Fri, 8 May 2026 11:50:45 +0100
Subject: [PATCH] build: commit pnpm-workspace.yaml with esbuild build approval

pnpm v11 stores build-script approvals in pnpm-workspace.yaml under
allowBuilds, separate from package.json's pnpm.onlyBuiltDependencies
(which only declares which deps MAY have build scripts; the workspace
file actually approves them).

Without this committed, CI's 'pnpm install --frozen-lockfile' sees
esbuild's postinstall as unapproved and bails with
[ERR_PNPM_IGNORED_BUILDS], which exits non-zero and breaks the
publish workflow's bump step.

Generated via 'pnpm approve-builds --all'.
---
 pnpm-workspace.yaml | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 pnpm-workspace.yaml

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
new file mode 100644
index 0000000..5ed0b5a
--- /dev/null
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,2 @@
+allowBuilds:
+  esbuild: true